Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: 7tNn3cGAtu8yz0oiYBUvvIBwfdhDABC66zVwn+6X/eE=
Subject key identifier: AB:27:08:50:44:24:61:04:7C:C4:70:16:89:C3:0C:12:50:17:0E:68
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 019A54C02456183A840CAC9B6C54A4F1A594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 047B
Signing time: Wed 05 Nov 2025 16:01:09 +0000
Manifest this update: Wed 05 Nov 2025 16:01:09 +0000
Manifest next update: Thu 06 Nov 2025 16:01:09 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: LGSYGv+uh8RUPHfKONXy2kc7h7ecJ8EDG/XHD7AL3Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:24:56:18:3a:84:0c:ac:9b:6c:54:a4:f1:a5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Nov 5 16:01:09 2025 GMT
Not After : Nov 6 16:01:09 2025 GMT
Subject: CN=ab270850442461047cc4701689c30c1250170e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:a4:68:47:e5:f9:32:af:3f:a5:33:13:64:
90:dc:71:a9:9d:f6:41:e9:da:2b:26:3b:bd:60:c5:
be:e5:d4:fd:83:44:6e:c9:cb:de:4c:97:26:c3:4c:
76:dd:9b:ea:b3:4c:a3:20:cc:46:b5:02:7b:d6:13:
df:c1:79:c2:ae:4c:33:8b:50:a4:5d:cd:8a:2e:9e:
32:e6:18:41:19:4d:73:bd:e9:d0:33:c8:a9:2b:32:
dd:46:4c:91:6c:5b:36:37:06:0b:b3:4e:50:a4:f9:
4c:38:49:96:bd:e2:8e:8c:60:ca:98:0d:e9:a3:78:
ed:6d:5e:f3:a3:ff:7f:b2:db:bd:cf:d6:50:df:5b:
db:b6:a9:a2:ea:b2:77:f3:d8:fa:f5:36:e1:7e:77:
68:f0:c0:aa:02:e3:aa:0b:91:aa:40:b5:95:ea:46:
37:98:82:d2:70:77:93:c7:25:ca:b5:89:2d:3e:38:
f7:6d:e2:b8:15:fe:d8:00:d1:a9:04:00:17:ee:aa:
e1:ed:60:c1:41:14:eb:b4:78:23:64:fe:63:4f:1f:
eb:6b:f6:35:38:d2:14:04:af:6c:d6:07:4f:a0:ae:
0b:4c:3d:b2:98:2d:63:29:de:57:79:71:5e:98:05:
0b:fa:11:b5:89:0c:e2:99:77:81:ce:db:7d:ae:ff:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:08:50:44:24:61:04:7C:C4:70:16:89:C3:0C:12:50:17:0E:68
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:cc:d6:b4:e3:de:1c:89:c3:51:52:4f:6a:dd:16:c2:b1:
38:56:c9:2e:e3:fb:51:bf:e3:f2:24:a6:f7:16:3f:15:78:3d:
23:f4:5b:fe:5e:fd:84:5e:e9:45:d7:5e:cf:63:57:ee:d6:35:
1b:55:20:c4:b9:2d:87:d7:c6:90:b0:fd:95:96:ae:f7:ae:64:
c7:a6:da:3e:75:63:0e:16:f0:45:f3:4b:04:54:c0:97:6c:e1:
3d:ab:b9:0c:7c:3a:e4:70:df:de:4b:a4:41:75:6f:39:89:f9:
02:5d:f9:30:56:f4:7b:17:01:56:22:d8:8f:0d:44:bf:fa:be:
96:c5:23:90:4e:aa:cf:44:39:48:bd:4d:78:1f:7a:d8:8c:27:
a6:14:b0:bb:ec:47:c0:f6:4e:2d:01:8a:53:0f:ab:64:87:de:
e4:0e:b8:0f:e2:b9:f2:95:e8:c6:16:94:8c:8b:f5:c8:03:65:
3c:6b:18:9b:23:d1:da:91:27:30:4d:c7:52:22:45:cf:75:db:
b0:70:83:e7:df:fe:e3:80:64:67:21:c5:fe:19:f5:b6:a7:32:
ea:bf:1b:e2:3d:73:14:bc:eb:de:69:0b:00:40:12:cd:9f:d8:
4d:7f:57:e9:20:ee:fa:23:58:c4:e5:e4:08:93:66:e5:f2:17:
65:b9:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:14:59 2025 by rpki-client